onkelbeh/fwbuilder
1
0
Fork 0
mirror of https://github.com/fwbuilder/fwbuilder synced 2026-03-22 03:07:20 +01:00
Code Issues Releases Wiki Activity
3,924 Commits 3 Branches 3 Tags
Commit Graph

3924 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Vadim Kurland
3f0f6a2aa4 * IOSImporter.cpp (createTCPUDPServicePair): see #2267 added 
support for import of object-group and service-object statements
of type "tcp-udp" (these get imported as service group object with
two tcp and udp service objects).
 2011-03-24 17:04:16 -07:00
Vadim Kurland
c533b74e8e * getServByName.cpp (getPortByName): see #2268 updated list of 
named tcp and udp ports recognized by the importer for Cisco ASA.
It is still unclear what port does the name "cifs" correspond to.
 2011-03-24 12:48:04 -07:00
Vadim Kurland
72370646a6 checking in updated unit tests after changes in handling port ranges for IOS and changes for better deduplication of networks and address ranges in importer 2011-03-23 23:54:55 -07:00
Vadim Kurland
909470a0bf see #1548 working on deduplication of network objects 2011-03-23 22:16:18 -07:00
Vadim Kurland
97061f54f0 fixes #2269 using non-versioned path in the settings .ini file for the GUID 2011-03-23 17:45:11 -07:00
Vadim Kurland
ee35e66818 fixed SF bug 3238026: build 
failure on systems without net-snmp development libraries.
 2011-03-23 16:33:54 -07:00
Vadim Kurland
1612ad88cd adding test file with some acl tests 2011-03-22 20:31:43 -07:00
Vadim Kurland
48179df4d4 first attempt at access-list import for pix/asa. not done yet 2011-03-22 20:31:16 -07:00
Vadim Kurland
2ebad6b511 * parsers/pix.g (port_object): see #2234 added support for import 
of "obejct-group service name tcp|udp" constructs in ASA 8.3 with
subsequent "port-object" statements.
 2011-03-22 17:41:42 -07:00
Vadim Kurland
90f6689886 fixes pix compiler crash when dynamic interface is used in ODst of a nat rule 2011-03-22 16:03:31 -07:00
Vadim Kurland
da317dd151 fixes #2261 Crash when expanding Standard Library 2011-03-22 15:36:49 -07:00
Vadim Kurland
5a83ec15ff overloaded t error reporting functions in all grammars to make errors appear in the importer log 2011-03-21 19:56:34 -07:00
Vadim Kurland
d4b79a1d35 see #2260 tested neq 2011-03-21 14:21:51 -07:00
Vadim Kurland
a6b873a313 see #2252 #2258 fixed crash #2258; imported port ranges are adjusted to make tcp/udp service objects port-range-inclusive 2011-03-21 14:04:03 -07:00
Vadim Kurland
0e3bf10cb9 see #2252 compilers for iosacl and pix automatically increment/decrement port range boundaries to make tcp/udp port ranges defined in tcp/udp service objects inclusive 2011-03-21 12:56:37 -07:00
Vadim Kurland
63391fefda see #2257 added comment in the grammar 2011-03-21 12:16:54 -07:00
Vadim Kurland
5b4456a28c see #2257 in case of a "service" statement with unknown service name, create a placeholder object and add a note to its comment 2011-03-21 12:15:18 -07:00
Vadim Kurland
3f4dfd7ebc see #2257 parser should detect "service " statements that use service name it does not recognize and issue a warning 2011-03-21 12:00:33 -07:00
Vadim Kurland
f3ce898d6c see #2257 fixed parsing of emty interface definitions and "no" commands inside interface context 2011-03-20 16:11:47 -07:00
Vadim Kurland
57ba766183 see #2257 fixed parsing of "name <ipv6> name" line; build 3505 2011-03-20 16:00:16 -07:00
Vadim Kurland
d35e9f201f a fix to fix windows build 2011-03-20 13:15:53 -07:00
Vadim Kurland
da2deee052 * ImportFirewallConfigurationWizard.cpp (accept): see #2253 
"importer should not creates objects while still in the middle of
the wizard". Importer wizard creates new objects in the object
tree only when user clicks Finish and abandons results if they
click Cancel.
 2011-03-20 13:11:26 -07:00
Vadim Kurland
eca0a93cc7 see #2255 menu item and shortcut icon for firewall import should be disabled when current library is "Deleted objects" or is read-only 2011-03-20 12:40:06 -07:00
Vadim Kurland
1577bca547 see #2248 fixed handling of named service objects with port op "neq" 2011-03-20 12:24:49 -07:00
Vadim Kurland
ccab39bcbd see #2242 making sure button Next disappears and Finish appears when import fails 2011-03-19 21:28:12 -07:00
Vadim Kurland
8fee475805 * IOSImporter.cpp (createTCPUDPNeqObject): see #2248 implemented 
import of Cisco IOS and PIX/ASA service configurations using port
operation "neq". Since object model in fwbuilder does not provide
direct support for "port not equal to" expression, this
configuration is conveted into two tcp or udp service objects with
port range extending below and above specified port and these two
service objects are then placed in a group.
 2011-03-19 20:54:08 -07:00
Vadim Kurland
07fb9a3bfc see #2242 fix crash when ASA import was attempted into locked library 2011-03-19 19:15:39 -07:00
Vadim Kurland
33bfd16c82 see #2250 "Object group some protocol-objects are not imported properly" 2011-03-19 19:06:16 -07:00
Vadim Kurland
57063f96b9 see #2251 implemented import of "object-group icmp-object" staements (pre-ASA 8.3) 2011-03-19 18:54:45 -07:00
Vadim Kurland
aeb652b0be see #2251 additional icmp type names for ASA, asa 8.0 test cases for object-group icmp-object 2011-03-19 18:42:50 -07:00
Vadim Kurland
b158752a99 see #2240 changelog record 2011-03-19 18:26:59 -07:00
Vadim Kurland
ff2b5eee62 * IPTImporter.cpp (pushPolicyRule): change in the importer 
behavior: configuration import is aborted with an appropriate
error message in the log when program enounters protocol or
service name that it does not recognize and can not convert to
protocol or port number. We used to replace port number with some
placeholder (usually 0) and mark rule as "bad" by coloring it red
and adding comment.
 2011-03-19 18:23:36 -07:00
Vadim Kurland
1af552cfa3 Merge branch 'development' of ssh://git@vc.netcitadel.com:2222/var/git/fwbuilder into development 2011-03-18 17:30:10 -07:00
Vadim Kurland
b3181f18ec see #2249 better grammar to parse tcp/udp specs for pix < 8.3 where keyword "destination" does not appear in "show run" output 2011-03-18 17:29:28 -07:00
Vadim Kurland
e0354bc330 see #2247 better grammar to parse tcp/udp specs for pix < 8.3 where keyword "destination" does not appear in "show run" output 2011-03-18 17:29:04 -07:00
Vadim Kurland
d9e5fd7c0a see #2247 better grammar to parse ipv6 addresses. Looks like I was able to build lexer rules to tokenize ipv6 addresses, yay! 2011-03-18 17:20:17 -07:00
Vadim Kurland
bc669bf21e see #2234 import of "object-group icmp-type" works 2011-03-17 18:58:23 -07:00
Vadim Kurland
c35a322ba8 see #2234 import of "object-group protocol" works 2011-03-17 18:47:04 -07:00
Vadim Kurland
d624d1f82b see #2234 import of "object-group service" works 2011-03-17 18:24:37 -07:00
Vadim Kurland
7d9455d0ab see #2234 import of "object-group service" works 2011-03-17 18:05:31 -07:00
Vadim Kurland
147deacfbe see #2244 clicking Back in import wizard to select different file did not change the file 2011-03-17 16:29:41 -07:00
Vadim Kurland
77cb905d64 see #2243 added test cases for empy named objects 2011-03-17 16:19:04 -07:00
Vadim Kurland
f7ad6f2f63 see #2240 named objects should not be deduplicated 2011-03-17 16:04:38 -07:00
Vadim Kurland
8fffbc119c see #2242 fail gracefully when a library or any folder inside are locked 2011-03-17 15:00:48 -07:00
Vadim Kurland
8faa985158 see #2241 skip Deleted Objects library while building object registry for deduplication 2011-03-17 14:42:04 -07:00
Vadim Kurland
aaa2d1f318 fixes #2238 redundant call to commitObject() 2011-03-17 14:34:26 -07:00
Vadim Kurland
c21b5714d2 build 3502 
;
 2011-03-17 12:41:57 -07:00
Vadim Kurland
f3f08d170d see #2239 added var firewall_name to installer configlets that define commands installer runs on the machine to activate policy 2011-03-17 12:36:52 -07:00
Vadim Kurland
88ad545d1d see #2234 import of object-group network works 2011-03-17 11:18:10 -07:00
Vadim Kurland
25dda91418 removed ambiguity warnings in pix grammar 2011-03-16 22:32:26 -07:00